IACA 2017 General Session

Transcription

1 IACA 2017 General Session Clear Sailing: Identity Assurance in Electronic Transactions Tuesday May 23rd 2017

2 An Introduction to Steve Roylance Regular Attendee & Speaker at IACA, CRF & ECRF conferences, as well as technical seminars (Winhec, Infosec, RSA etc.) Senior VP Identity Services. Responsible for our (Legal Entity Identifier) project RapidLEI 15+ years of experience in Identity Assurance & Authentication within business eco systems Founder of the CABForum (Ultimately Responsible for bringing Higher levels of Identity Assurance to browsers Extended Validation) As the subject is Identity Assurance Actual Identity: Stephen Roylance

3 An Introduction to Ubisecure Part 1 timeline 2008: Liberty Alliance certification 2015: GlobalSign Oy joins GSMA 2002: Ubisecure Solutions Oy is established 2006: Tietoyhteiskunta Award, KATSO project 2009: Ubisecure joins Kantara Initiative 2014: Ubisecure joins GlobalSign 2016: Ubisecure becomes independent again 2003: First Customer, Tax Administration 2007: First Customer IAM delivery, Tekes 2011: Our customer wins the European Identity Award 2015: Our customer wins the European Identity Award

4 An Introduction to Ubisecure Part 2 IAM Products Role Based Access SSO Federation Customer Identity Access Management (CIAM) Solving GDPR & Consent Management (100K+) On Premise or ISO27001 Cloud options MFA Delegated Admin Self Service IDENTITY PLATFORM Social > Verified Identities Step Up Authentication Consent & Attribute Management Mobile Connect Identity Gateway Accelerator MNOs Consumer Identities & Single Sign On Revenue from Registration Attribute Enrichment Identity as a service (IDaaS) Allowing Identity Providers to monetize their DBs Facilitating delivery of KYC services CRM Enrichment

5 Identity Assurance within Electronic Transactions? Understand the Business Requirements of your Customers and their Relying Parties. Understanding the possible ways forward to drive business value from Regulatory Requirements (KYC, AML), avoiding sandbanks and approaching storms! GDPR in 2018 Understanding Key Terminology. IAM TLAs (Identity & Access Management Three Letter Acronyms) As an IdP, Capture additional revenue $$$ opportunities by monetizing your database! Talk to Ubisecure to ascertain and confirm business and compliance needs to deliver effective solutions suited to your country, or state, eco system.

6 What is IAM? Identity & Access Management IAM ACCESS MANAGEMENT How users log on? How users present ID s? Who are they? Single sign on, federation IDENTITY MANAGEMENT How users register,? How users obtain ID s? What users can do? Who can they delegate to?

7 Your No 1 question! How do we authenticate applicants New Applicant Business Registry Business Registry eidas Strength of Assurance Do you allow social login for basic access then Step Up later in the process? What Personally Identifiable Information (PII) do you accept/store? GDPR for EU Citizens! Do you allow applicants to perform their own delegation & administration? Do you invest in continually updating your onboarding processes to avoid risk and provide alternative methods of Authentication or do you outsource? If you do, what s the ROI or opportunity for incremental revenue??

8 A win win Business Model The Business Registry as an IdP. Business Registry Business Registry Registered Entity Relying Party Bank A Relying Party Bank B The Traditional (Outdated) Model Everyone pays to authenticate the same entity. Inefficient/slow/expensive Business Registry (Identity Provider) IDENTITY PLATFORM Registered Entity (Principle) Bank A (Service Provider) Bank B (Service Provider) The Modern Model efficient KYC as attributes, Company name, Number etc are presented by the Business Registry as an IdP.

9 In summary Become an Identity Provider (IdP) Enable automation and accuracy across all associated eco systems which rely on business data. Create an additional revenue stream for authentication of business attributes Improve Ranking within the World Bank s, ease of doing business tables: Using Social Login to speed up initial registration and Step up Authentication for high trust activities Support a growing suite of Federated Identity Providers for Individuals to address trust issues Reduce risk from GDPR legislation around Personally Identifiable Information Offload delegation of internal roles to applicants Reduce system complexity. Enjoy the benefits that an effective IAM policy can bring in terms of brand protection, closer collaboration with Connected Government and the Financial Services Community.

10 A final clarification It s a standards based approach...

11 Join a growing community of Trust Networks SOCIAL MEDIA BUSINESS MULTI FACTOR FEDERATED NETWORKS TUPAS WS Federation... eidas LDAP SQL SMS OTP OTP Printout Capture and convert visitors with social media identities. Decrease abandonment rate with effortless registration and increase loyalty by allowing the customers use what they already have. Allow your business customers to Single Sign On to your online services from their own corporate network and thus taking the customer experience to a whole new level. Provide strong or step up authentication where needed from one time passwords to mobile & biometrics. Protect your online assets with appropriate authentication. Enjoy the plug and play support for several established federation networks and standards.